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AMENDMENTS TO THE CLAIMS : 

Please cancel claims 1-13, 18-19, 24, 28, 31, 36-37, and 41-82 without prejudice or 
disclaimer and amend the claims as follows: 

1.-13. (Canceled) 

14. (Currently Amendedl) ^fhc A center compute r , acco r ding to claim 13, 

computer in a diptal signature system, comprising: 

first generating means for generating a signing-kev for a signer: 

second generating means for generating a verification-key for a verifier: 

a first output device outputting the signing-kev generated by the first generating 

means: and 

a second output device outputting the verification-key generated by the second 
generating means, wherein: 

the first generating means comprises means for generating a first multivariate 
fimction, and means for generating a second multivariate function obtained by substituting the 
signer's identification code into a first variable of the first multivariate fiinction; 

the first output device outputs the second multivariate fimction as the 
signing-key for the signer; 

the second generating means comprises means for generating a random 
number, a third multivariate fiinction obtained by substituting the random nimiber to a second 
variable of the first multivariate fimction; and 

the second output device outputs the random number and the third multivariate 
function as the verification-key for the verifier. 
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15. (Original) The center computer according to claim 14, wherein: 
the second multivariate function is generated by substituting the signer's identification 
code into a first group of variables of the first multivariate fiinction. 



16. (Original) The center computer according to claim 14, wherein: 

a group of random numbers is generated and the third multivariate fimction is 

generated by substituting the group of random numbers into a second group of variables of 

the first multivariate function; and 

the group of random numbers and the third multivariate function are outputted as the 

verification-key for the verifier. 



17. (Currently Amended) A method of establishing a signing-key for a signer and 
a verification-key for a verifier , said method comprising the steps of : 

generating a first multivariate function; 

generating a second multivariate function obtained by substituting the a signer's 
identification code into a first variable of the first multivariate function; 

outputting the second multivariate function as a signing-key for the signer; 

generating a random number, a third multivariate function obtained by substituting 
the random number into a second variable of the first multivariate function; and 

outputting the random number and the third multivariate function as a 
verification-key for the verifier. 

18. -19. (Canceled) 



20. (Currently Amended) A computer readable recording medium having a 
program recorded thereon, the program controlling the computer so as to: 
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generate a first multivariate function; 

generate a second multivariate function obtained by substituting a signer's 
identification code into a first variable of the first multivariate function; 

output the second multivariate function as a signing-key for the signer; 

generate a random number, a third multivariate function obtained by substituting the 
random number to a second variable of the first multivariate function; and 

output the random number and the third multivariate function as a verification-key for 
the a verifier. 

21 . (Original) The computer readable recording medium according to claim 20, 
wherein the program controls the computer so as to: 

generate the second multivariate function by substituting the signer's identification 
code into a first group of variables of the first multivariate function; and 

output the second multivariate function as a signing-key for the signer. 

22. (Original) The computer readable recording medium according to claim 20, 
wherein the program controls the computer so as to: 

generate a group of random numbers and generate a third multivariate function by 
substituting the group of random nimibers into a second group of variables of the first 
multivariate function; and 

output the group of random mmabers and the third multivariate function as a 
verification-key for the verifier. 

23. (Currently Amended) A method of establishing a digital signature in a digital 
signature system comprising a center computer and a first and second terminal devices which 
can communicate with each other, comprising th e st e ps of : 
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in the center computer, 

generating a first multivariate function, 

generating a second multivariate function obtained by substituting a signer's 
identification code into a first variable of the first multivariate function, 

outputting the second multivariate function as a signing-key for the signer, 
generating a random number, a third multivariate function obtained by 
substituting the random number into a second variable of the first multivariate function, 
function: and 

outputting the random number and the third multivariate function as a 
verification-key for a verifier; 

in the first terminal device, 

accepting the signer's signing-key; 
inputting the accepted signer's signing-key; 
inputting an identification code of a digital data; 

* 

generating a fourth multivariate function obtained by substituting the 
identification code of the digital data into the third variable of the second multivariate 
function, function: and 

outputting the fourth multivariate function as a digital signature; 
in the second terminal device, 

accepting the verification-key, 

inputting the accepted verifier's verification-key, 

accepting an identity of the signcr^s identity signer , 

inputting the signer's identification code, 

accepting the identification code of the digital data, 

inputting the accepted identification code of the digital data, 

accepting the digital signature. 
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inputting the accepted digital signature, 

generating a first evaluation value by substituting the random number into the 
second variable of the fourth multivariate function, 

generating a second evaluation value by substituting the signer's identification 
code and the identification code of the digital data into the first and third variables of the 
third multivariate function, respectively, and 

accepting the digital signature as valid if both of the first and second 
evaluation values equal, and otherwise rejecting the digital signature as invalid. 

24. (Canceled) 

25. (Currently Amended) The A first terminal device according to claims 24, in a 
digital signature svstem, comprising: 

accepting means for accepting a signer's sigxiing-kev: 

a first input device inputting the signer's signing-kev: 

a second input device inputting an identification code of a digital data: 

generating means for generating a digital signature: and 

an output device outputting the digital signature generated bv the generating means, 
wherein: 

the digital signature generating means generates a fourth multivariate fimction 
obtained by substituting an identification code of a digital data into a third variable of a 
second multivariate fianction; and 

the output device outputs the fourth multivariate fiinction as the digital 

signature. 
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26. (Original) The first terminal device according to claim 25, wherein: 

the digital signature generating means generates a fourth multivariate function by 
substituting an identification code of a digital data into a third group of variables of a second 
multivariate function; and 

the output device outputs the fourth multivariate function as the digital signature. 

27. (Currently Amended) A method of establishing a digital signature comprising 
th e ste p s of : 

accepting a signer's signing-key; 
inputting the accepted signer's signing-key; 
inputting an identification code of a digital data; 

generating a fourth multivariate function of a plurality of multivariate functions 
obtained by substituting the identification code of the digital data into a third variable of a 
second multivariate fimction; and 

outputting the fourth multivariate function as a digital signature. 

28. (Currently Amended) The method of establishing a digital signatvire according 
to claims claim 27, wherein: 

a fourth multivariate function is generated by substituting an identification code of a 
digital data into a third group of variables of a second multivariate function; and 
the fourth multivariate function is outputted as a digital signature. 

29. (Currently Amended) A computer readable recording medium having a 
program recorded thereon, the program controlling a computer so as to: 

accept an inputted signer's signing-key; 

accept an inputted identification code of a digital data; 
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generate a fourth multivariate function of a plurality of multivariate functions obtained 
by substituting the identification code of the digital data into a third variable of a second 
multivariate function; and 

output the fourth multivariate function as a digital signature. 

30. (Currently Amended) The computer readable recording medium according to 
claim 29, wherein the program controls the computer so as to: 

generate a tiie fourth multivariate function by substituting an the identification code of 
a the digital data into a third group of variables of n the second multivariate function; and 
output the fourth multivariate function as a digital signature. 

31. (Canceled) 

32. (Currently Amended) The A second terminal device acco r ding to claim 3 1 , in 
a digital signature svstem comprising: 

first accepting means for accepting a verification-kev: 
a first input device inputting a verifier's verification-kev: 
second accepting means for accepting a signer's identity; 
a second input device inputting the signer's identification code: 
third accepting means for an identification code of a digital data: 
a third input device inputting the identification code of the digital data: 
fourth accepting means for accepting a digital signature: 
a fourth input device inputting the digital signature: 
verifying means for verifying a validity of the digital signature using the 
verification-kev. the signer's identification code and the identification code of the digital data: 
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an output device outputting the result of verifying the validity of the digital signature, 
namelv, acceptable as valid or not, wherein the verifying means for verifying the validity of 
the digital signature: 

generates a first evaluation value by substituting a random number into a 
second variable of a fourth multivariate function of a plurality of multivariate functions : 

generates a second evaluation value by substituting the signer's identification 
code and the identification code of the digital data into a first variable and a third variables 
variable of a third multivariate function, respectively; and 

accepts the digital signature as valid if both of the first and second evaluation 
values equal, and otherwise rejects the digital signature as invalid. 

33. (Original) The second terminal device according to claim 32, wherein a first 
evaluation value is generated by substituting a group of random numbers into a second group 
of variables of the fourth multivariate function. 

34. (Original) The second terminal device according to claim 32, wherein the 
signer's identification code is substituted into a first group of variables of the third 
multivariate function, or the identification code of the digital data is substituted into a third 
group of variables of the third multivariate function, 

35. (Currently Amended) A method of verifying the validity of a digital signature 
comprising the steps of : 

accepting a verifier's verification-key; 
inputting the accepted verification-key; 
accepting a signer's identity; 
inputting the signer's identification code; 
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accepting an identification code of a digital data; 
inputting the identification code of the digital data; 
accepting a digital signature; 
inputting the digital signature; 

generating a first evaluation value by substituting a random number into a second 
variable of a fourth multivariate function of a plurality of multivariate functions : 

generating a second evaluation value by substituting the signer's identification code 
and the identification code of the digital data into a first variable and a third vai - iablcs variable 
of a third multivariate function, respectively; and 

accepting the digital signature as valid if both of the first and second evaluation values 
equal, and otherwise rejecting the digital signature as invalid. 

36.-37. (Canceled) 

38. (Currently Amended) A computer readable recording medium having a 
program recorded thereon, the program controlling the computer so as to: 
accept an inputted verifier's verification-key; 
accept an inputted signer's identification code; 
accept an inputted identification code of a digital data; 
accept an inputted digital signature; 

generate a first evaluation value by substituting a random number into a second 
variable of a fourth multivariate function of a plurality of multivariate functions ;; 

generate a second evaluation value by substituting the signer's identification code and 
the identification code of the digital data into a first variable and a third variables variable of 
a third multivariate function, respectively; and 
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accept an inputted signer's identification code; 
accept an inputted identification code of a digital data; 
accept an inputted digital signature; 

generate a first evaluation value by substituting a random number into a second 
variable of a fourth multivariate function of a plurality of multivariate fimctions :: 

generate a second evaluation value by substituting the signers identification code and 
the identification code of the digital data into a first variable and a third variables variable of 
a third multivariate fiinction, respectively; and 

accept the digital signature as valid if both of the first and second evaluation values 
equal, and otherwise reject the digital signature as invalid. 

39. (Original) The computer readable recording medium according to claim 38, 
wherein the program controls the computer so as to generate a first evaluation value by 
substituting a group of random numbers into a second group of variables of the fourth 
multivariate fiinction. 

40. (Original) The computer readable recording medium according to claim 38, 
wherein the program controls the computer so as to substitute the signers identification code 
into a first group of variables of the third multivariate fimction, or substitute the 
identification code of the digital data into a third group of variables of the third multivariate 
function. 



41.-82. (Canceled) 



